CVE-2025-71228
Received Received - Intake
Kernel Page Fault Vulnerability in Linux LoongArch VM_NONE/VM_SHARED

Publication date: 2026-02-18

Last updated on: 2026-02-27

Assigner: kernel.org

Description
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-18
Last Modified
2026-02-27
Generated
2026-06-16
AI Q&A
2026-02-18
EPSS Evaluated
2026-02-26
NVD
CVE-2025-71228
EUVD
EUVD-2025-207841
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in the Linux kernel on the LoongArch architecture. It involves an incorrect setting of the protection_map[] for VM_NONE and VM_SHARED memory areas on 32-bit platforms. Specifically, the _PAGE_PROTNONE value is 0, so setting a virtual memory area (VMA) to VM_NONE or VM_SHARED causes pages to be marked as non-present, which leads to a kernel page fault (Oops). The fix replaces _PAGE_PROTNONE with _PAGE_PRESENT to set the correct protection_map[].

Impact Analysis

This vulnerability can cause the Linux kernel to crash due to a page fault when handling certain memory areas (VM_NONE or VM_SHARED) on 32-bit LoongArch platforms. Such crashes (kernel Oops) can lead to system instability, potential denial of service, and unexpected reboots, impacting system availability.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-71228. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart